Cloud Key Management Service (KMS) API

Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.

Service: cloudkms.googleapis.com

The Service name cloudkms.googleapis.com is needed to create RPC client stubs.

google.cloud.kms.v1.Autokey

Methods
CreateKeyHandle The method google.cloud.kms.v1.Autokey.CreateKeyHandle is not available in Trusted Cloud by S3NS.
GetKeyHandle The method google.cloud.kms.v1.Autokey.GetKeyHandle is not available in Trusted Cloud by S3NS.
ListKeyHandles The method google.cloud.kms.v1.Autokey.ListKeyHandles is not available in Trusted Cloud by S3NS.

google.cloud.kms.v1.AutokeyAdmin

Methods
GetAutokeyConfig The method google.cloud.kms.v1.AutokeyAdmin.GetAutokeyConfig is not available in Trusted Cloud by S3NS.
ShowEffectiveAutokeyConfig The method google.cloud.kms.v1.AutokeyAdmin.ShowEffectiveAutokeyConfig is not available in Trusted Cloud by S3NS.
UpdateAutokeyConfig The method google.cloud.kms.v1.AutokeyAdmin.UpdateAutokeyConfig is not available in Trusted Cloud by S3NS.

google.cloud.kms.v1.EkmService

Methods
CreateEkmConnection Only EXTERNAL_VPC connections are supported.
Creates a new EkmConnection in a given Project and Location.
GetEkmConfig Returns the EkmConfig singleton resource for a given project and location.
GetEkmConnection Only EXTERNAL_VPC connections are supported.
Returns metadata for a given EkmConnection.
ListEkmConnections Only EXTERNAL_VPC connections are supported.
Lists EkmConnections.
UpdateEkmConfig Updates the EkmConfig singleton resource for a given project and location.
UpdateEkmConnection Only EXTERNAL_VPC connections are supported.
Updates an EkmConnection's metadata.
VerifyConnectivity Only EXTERNAL_VPC connections are supported.
Verifies that Cloud KMS can successfully connect to the external key manager specified by an EkmConnection.

google.cloud.kms.v1.HsmManagement

Methods

google.cloud.kms.v1.KeyAccessJustificationsConfig

Methods
GetKeyAccessJustificationsPolicyConfig The method google.cloud.kms.v1.KeyAccessJustificationsConfig.GetKeyAccessJustificationsPolicyConfig is not available in Trusted Cloud by S3NS.
ShowEffectiveKeyAccessJustificationsEnrollmentConfig The method google.cloud.kms.v1.KeyAccessJustificationsConfig.ShowEffectiveKeyAccessJustificationsEnrollmentConfig is not available in Trusted Cloud by S3NS.
ShowEffectiveKeyAccessJustificationsPolicyConfig The method google.cloud.kms.v1.KeyAccessJustificationsConfig.ShowEffectiveKeyAccessJustificationsPolicyConfig is not available in Trusted Cloud by S3NS.
UpdateKeyAccessJustificationsPolicyConfig The method google.cloud.kms.v1.KeyAccessJustificationsConfig.UpdateKeyAccessJustificationsPolicyConfig is not available in Trusted Cloud by S3NS.

google.cloud.kms.v1.KeyManagementService

Methods
AsymmetricDecrypt Decrypts data that was encrypted with a public key retrieved from GetPublicKey corresponding to a CryptoKeyVersion with CryptoKey.purpose ASYMMETRIC_DECRYPT.
AsymmetricSign Signs data using a CryptoKeyVersion with CryptoKey.purpose ASYMMETRIC_SIGN, producing a signature that can be verified with the public key retrieved from GetPublicKey.
CreateCryptoKey Create a new CryptoKey within a KeyRing.
CreateCryptoKeyVersion Create a new CryptoKeyVersion in a CryptoKey.
CreateImportJob Create a new ImportJob within a KeyRing.
CreateKeyRing Create a new KeyRing in a given Project and Location.
Decrypt Decrypts data that was protected by Encrypt.
DestroyCryptoKeyVersion Schedule a CryptoKeyVersion for destruction.
Encrypt Encrypts data, so that it can only be recovered by a call to Decrypt.
GenerateRandomBytes Generate random bytes using the Cloud KMS randomness source in the provided location.
GetCryptoKey Returns metadata for a given CryptoKey, as well as its primary CryptoKeyVersion.
GetCryptoKeyVersion Returns metadata for a given CryptoKeyVersion.
GetImportJob Returns metadata for a given ImportJob.
GetKeyRing Returns metadata for a given KeyRing.
GetPublicKey Returns the public key for the given CryptoKeyVersion.
ImportCryptoKeyVersion Import wrapped key material into a CryptoKeyVersion.
ListCryptoKeyVersions Lists CryptoKeyVersions.
ListCryptoKeys Lists CryptoKeys.
ListImportJobs Lists ImportJobs.
ListKeyRings Lists KeyRings.
MacSign Signs data using a CryptoKeyVersion with CryptoKey.purpose MAC, producing a tag that can be verified by another source with the same key.
MacVerify Verifies MAC tag using a CryptoKeyVersion with CryptoKey.purpose MAC, and returns a response that indicates whether or not the verification was successful.
RawDecrypt Decrypts data that was originally encrypted using a raw cryptographic mechanism.
RawEncrypt Encrypts data using portable cryptographic primitives.
RestoreCryptoKeyVersion Restore a CryptoKeyVersion in the DESTROY_SCHEDULED state.
UpdateCryptoKey Update a CryptoKey.
UpdateCryptoKeyPrimaryVersion Update the version of a CryptoKey that will be used in Encrypt.
UpdateCryptoKeyVersion Update a CryptoKeyVersion's metadata.

google.cloud.location.Locations

Methods
GetLocation The method google.cloud.location.Locations.GetLocation is not available in Trusted Cloud by S3NS.
ListLocations The method google.cloud.location.Locations.ListLocations is not available in Trusted Cloud by S3NS.

google.iam.v1.IAMPolicy

Methods
GetIamPolicy The method google.iam.v1.IAMPolicy.GetIamPolicy is not available in Trusted Cloud by S3NS.
SetIamPolicy The method google.iam.v1.IAMPolicy.SetIamPolicy is not available in Trusted Cloud by S3NS.
TestIamPermissions The method google.iam.v1.IAMPolicy.TestIamPermissions is not available in Trusted Cloud by S3NS.

google.longrunning.Operations

Methods
GetOperation The method google.longrunning.Operations.GetOperation is not available in Trusted Cloud by S3NS.